$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa File: 57babf0d-7d6f-4016-a59e-e7825150c105.roa (raw, json) Hash identifier: j780xOTCRIBV05kvsCxiEAwQ28b+SWl3XPt4USdAjcQ= Subject key identifier: F4:9F:10:23:4B:3F:01:C6:E5:C5:79:7D:B0:0A:DC:29:05:68:6F:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07AA95A9D0F55F66E4FD4FF1841A3F9779CBC763 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa Signing time: Mon 31 Mar 2025 20:36:58 +0000 ROA not before: Mon 31 Mar 2025 20:36:58 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:aa:95:a9:d0:f5:5f:66:e4:fd:4f:f1:84:1a:3f:97:79:cb:c7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 20:36:58 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:b4:0d:60:e8:3d:e0:10:9c:30:d9:00:99: 1e:87:a2:7a:ab:94:ba:4e:a4:b0:b5:73:ad:ef:7d: 43:c4:34:b5:5a:bd:c2:b7:24:ab:af:56:09:9a:9e: 90:fb:8a:7b:d6:fe:14:b3:99:6f:e5:de:87:84:b6: d7:86:15:b1:b9:9a:6f:b9:80:72:30:4b:4d:41:e5: 3e:22:64:7e:14:a4:da:e3:5a:af:5f:e3:08:f7:fa: c4:00:b3:73:77:e1:2d:17:13:9f:3a:61:19:fc:dd: 62:5c:33:26:68:3a:25:29:19:83:20:2f:0c:8c:4d: 22:f6:fc:dd:ee:fb:b6:8b:c5:d7:28:aa:64:ec:f0: 50:21:a1:a6:2f:4b:6a:a2:01:69:0b:09:e4:50:c1: 8f:9e:51:77:d1:98:34:21:44:6b:c2:bb:7d:5e:25: 89:41:ba:c7:b3:4e:74:a7:7d:61:9d:33:3a:99:f0: 93:33:f4:8a:1d:54:90:05:74:b6:44:aa:3c:73:1a: 3e:28:e8:5c:ef:1f:1d:53:cf:15:2a:bf:af:3e:eb: dd:d3:02:82:99:56:c4:fc:b2:fb:1e:50:2d:fb:75: 24:1b:9b:bc:c5:56:68:d2:ff:e8:42:e7:da:79:46: 50:f8:8a:ba:50:01:6b:7b:6d:bd:5a:61:3a:4a:8e: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:10:23:4B:3F:01:C6:E5:C5:79:7D:B0:0A:DC:29:05:68:6F:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.242.0/23 Signature Algorithm: sha256WithRSAEncryption ad:cb:c9:95:73:43:6f:a3:e9:4b:e2:ce:a9:d2:6a:3a:d7:07: 35:9e:7d:11:99:e6:e4:de:9e:69:cb:50:ad:bd:b0:e0:f8:69: f4:e2:87:34:01:0e:cb:f7:7e:3e:63:56:5f:b5:d6:9e:27:cf: d9:2c:40:57:9f:ff:3a:f1:95:03:16:7e:74:87:27:39:75:d2: d4:2f:4e:31:7a:87:b3:d3:87:50:21:24:8d:6e:8f:1d:7d:00: f8:df:0c:5b:b7:b5:0f:f3:2f:c5:8c:7b:60:dd:18:ba:23:85: f2:ff:da:df:cc:f5:94:81:c9:53:45:00:a9:d6:c0:dc:e3:e0: 3c:18:8b:ba:32:27:78:c3:cb:cb:55:ef:0b:8e:8c:c9:63:a3: c5:90:3f:e2:42:55:8f:50:d4:b3:77:a9:1b:9d:ce:ae:f8:e0: 63:07:5c:e5:31:07:e0:bf:97:a7:b9:c0:f9:fa:62:24:b7:7e: 5e:b0:b6:3f:a0:85:f5:9a:71:5f:df:f9:44:e1:41:99:6a:0e: e0:4b:f7:6e:f2:c8:ee:59:cb:25:09:ed:20:86:0c:ae:f7:74: e2:6e:1d:25:f1:98:c9:a7:91:fc:cb:e1:2a:79:b9:80:87:f0: 9d:5a:9e:2d:25:2c:ac:a9:28:7b:af:f7:e7:bd:2f:84:36:d0: 94:9e:a3:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB6qVqdD1X2bk/U/xhBo/l3nLx2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMjAzNjU4WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTBlOTk0NDIyNmQ0Mzg4ZDhiMjA5YmNiMjM1NTg3MDc1 NmQzNzZkZmRkMjQyNjgzMGIwYTg1NDkyYTRmNTkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqybQNYOg94BCcMNkAmR6HonqrlLpOpLC1c63vfUPENLVa vcK3JKuvVgmanpD7invW/hSzmW/l3oeEtteGFbG5mm+5gHIwS01B5T4iZH4UpNrj Wq9f4wj3+sQAs3N34S0XE586YRn83WJcMyZoOiUpGYMgLwyMTSL2/N3u+7aLxdco qmTs8FAhoaYvS2qiAWkLCeRQwY+eUXfRmDQhRGvCu31eJYlBusezTnSnfWGdMzqZ 8JMz9IodVJAFdLZEqjxzGj4o6FzvHx1TzxUqv68+693TAoKZVsT8svseUC37dSQb m7zFVmjS/+hC59p5RlD4irpQAWt7bb1aYTpKjvSDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9J8QI0s/AcblxXl9sArcKQVob8owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3YmFiZjBkLTdkNmYtNDAxNi1hNTllLWU3ODI1MTUwYzEwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7vIwDQYJKoZIhvcNAQELBQADggEBAK3LyZVzQ2+j6UvizqnSajrXBzWe fRGZ5uTenmnLUK29sOD4afTihzQBDsv3fj5jVl+11p4nz9ksQFef/zrxlQMWfnSH Jzl10tQvTjF6h7PTh1AhJI1ujx19APjfDFu3tQ/zL8WMe2DdGLojhfL/2t/M9ZSB yVNFAKnWwNzj4DwYi7oyJ3jDy8tV7wuOjMljo8WQP+JCVY9Q1LN3qRudzq744GMH XOUxB+C/l6e5wPn6YiS3fl6wtj+ghfWacV/f+UThQZlqDuBL927yyO5ZyyUJ7SCG DK73dOJuHSXxmMmnkfzL4Sp5uYCH8J1ani0lLKypKHuv9+e9L4Q20JSeo78= -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:05 2025 by rpki-client